$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7a6faaa-b5e0-3212-95c3-5081f5482483.roa File: a7a6faaa-b5e0-3212-95c3-5081f5482483.roa (raw, json) Hash identifier: wX6bbZLQOm9gH80/ZKcAbuHLCx6NFFZOKpb1DW5S64w= Subject key identifier: B4:62:23:82:CA:72:A0:B5:C2:07:FC:9B:17:3C:BD:F5:00:4E:98:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858476C9D952E57EE724F90A1B798 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7a6faaa-b5e0-3212-95c3-5081f5482483.roa Signing time: Fri 04 Oct 2024 01:00:31 +0000 ROA not before: Fri 04 Oct 2024 01:00:31 +0000 ROA not after: Thu 02 Jan 2025 02:00:31 +0000 asID: 33651 IP address blocks: 98.35.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6c:9d:95:2e:57:ee:72:4f:90:a1:b7:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 4 01:00:31 2024 GMT Not After : Jan 2 02:00:31 2025 GMT Subject: CN=3aa6add1-f00b-4ebf-9478-19b3c7a7c9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:57:0b:55:a1:17:89:dc:72:80:d4:11:49:d0: ac:20:71:56:89:8b:ec:fd:96:c1:8d:cc:7b:dc:c4: 25:4f:a8:2d:79:f2:55:52:4e:71:d6:51:19:01:64: f4:3d:b4:69:55:1e:6e:83:1e:5e:ac:c7:45:0e:c7: a7:e0:1f:a8:c1:15:37:ca:83:f3:91:ce:b1:d6:14: 3f:2f:ea:59:1d:25:f0:76:c1:65:a9:d0:e0:b8:56: 74:d1:d4:28:01:3f:80:0f:15:e4:8a:b2:18:04:e2: 1f:17:0f:87:38:61:59:19:c7:de:11:42:dd:06:77: 3d:f2:b0:0d:6f:c2:05:7e:f5:b3:83:d9:94:22:cb: 06:a6:aa:c8:97:b6:9a:4d:6d:1f:42:28:b0:f0:bb: 87:e4:1d:1f:9b:79:8c:d8:cc:5b:10:54:26:38:bd: a1:16:6a:4e:0e:05:34:20:cd:83:93:b2:7e:4e:d2: f7:a3:32:95:2c:23:06:e3:0a:c3:f7:f6:71:22:c5: 63:fc:27:a0:c7:d5:96:56:8e:2e:82:9a:de:82:43: 9e:3f:1b:b6:56:5b:71:a9:dd:8b:24:f3:e8:bd:f6: 35:88:f1:74:6b:39:bc:5d:63:bc:82:e5:a0:0e:39: 06:0b:7f:90:5c:a6:48:8d:a0:e5:15:13:76:eb:f3: 7f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:62:23:82:CA:72:A0:B5:C2:07:FC:9B:17:3C:BD:F5:00:4E:98:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7a6faaa-b5e0-3212-95c3-5081f5482483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:16:34:a0:48:69:68:ee:8c:2e:85:7c:f4:bc:52:2d:44:07: 0c:41:e6:06:f6:8e:0c:46:94:93:9b:b4:81:b6:91:0c:e0:71: ee:fc:f4:5a:31:cd:af:cc:9d:39:b4:13:8d:ea:3c:da:51:a8: 10:94:95:5b:2b:12:b9:aa:66:04:e5:ec:7c:6f:a3:7e:9c:22: c6:2e:01:a5:cb:3a:19:b2:97:c0:7f:8e:fc:7a:3e:89:76:43: 16:f1:35:94:b8:d7:e2:41:18:e9:7b:2a:23:95:99:f1:f4:af: 36:8b:0a:16:1b:28:f5:77:2b:b3:ce:01:60:cd:55:be:6a:11: 1c:1c:f8:bc:bc:fa:55:e3:4c:65:24:37:ac:dd:18:b8:84:7c: 4a:04:c8:9a:05:da:98:bf:a5:a0:d9:18:83:25:4c:01:d9:8a: 13:cd:0d:58:6e:45:f6:d7:28:ea:4e:d1:0c:fb:ce:04:20:54: d0:a9:8d:0b:ae:b7:df:7b:5a:d2:29:19:9a:1c:bf:e8:30:5d: 81:0f:17:56:f9:1a:36:20:3f:a1:74:5d:41:9f:88:ca:38:43: 11:52:08:52:52:bc:9d:0d:62:e2:94:5b:0b:bd:26:43:67:f1: 81:a3:ba:e2:7e:6c:14:3b:28:1f:fe:fa:e7:6f:bd:0f:0c:ab: cb:6f:9b:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnZUuV+5yT5Cht5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk M2FhNmFkZDEtZjAwYi00ZWJmLTk0NzgtMTliM2M3YTdjOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFcLVaEXidxygNQRSdCsIHFWiYvs/ZbBjcx7 3MQlT6gtefJVUk5x1lEZAWT0PbRpVR5ugx5erMdFDsen4B+owRU3yoPzkc6x1hQ/ L+pZHSXwdsFlqdDguFZ00dQoAT+ADxXkirIYBOIfFw+HOGFZGcfeEULdBnc98rAN b8IFfvWzg9mUIssGpqrIl7aaTW0fQiiw8LuH5B0fm3mM2MxbEFQmOL2hFmpODgU0 IM2Dk7J+TtL3ozKVLCMG4wrD9/ZxIsVj/Cegx9WWVo4ugpregkOePxu2Vltxqd2L JPPovfY1iPF0azm8XWO8guWgDjkGC3+QXKZIjaDlFRN26/N/6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRiI4LKcqC1wgf8mxc8vfUATph+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdhNmZhYWEtYjVlMC0z MjEyLTk1YzMtNTA4MWY1NDgyNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMgWNKBIaWjujC6FfPS8Ui1EBwxB5gb2jgxGlJObtIG2kQzgce789Fox za/MnTm0E43qPNpRqBCUlVsrErmqZgTl7Hxvo36cIsYuAaXLOhmyl8B/jvx6Pol2 QxbxNZS41+JBGOl7KiOVmfH0rzaLChYbKPV3K7POAWDNVb5qERwc+Ly8+lXjTGUk N6zdGLiEfEoEyJoF2pi/paDZGIMlTAHZihPNDVhuRfbXKOpO0Qz7zgQgVNCpjQuu t997WtIpGZocv+gwXYEPF1b5GjYgP6F0XUGfiMo4QxFSCFJSvJ0NYuKUWwu9JkNn 8YGjuuJ+bBQ7KB/++udvvQ8Mq8tvm18= -----END CERTIFICATE-----Generated at Mon Nov 25 20:05:19 2024 by rpki-client on console-fra.rpki-client.org